- From: Anne van Kesteren <notifications@github.com>
- Date: Tue, 03 Apr 2018 00:56:11 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Tuesday, 3 April 2018 07:57:53 UTC
I think Adam Barth tried `Origin` on each request to combat XSRF and it's simply not web compatible. That's why we ended up with the rules for it we have today. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/687#issuecomment-378161809
Received on Tuesday, 3 April 2018 07:57:53 UTC